Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3133342e302f32332d3234203d3e20323635333033.roa
File:                     3230312e38372e3133342e302f32332d3234203d3e20323635333033.roa (raw, json)
Hash identifier:          cHh8MoUbflp85jVqeL9L9XxEu3meTNvBldYUPa44UtU=
Subject key identifier:   A4:46:F9:FF:F9:F3:25:8F:7F:F1:17:81:0F:96:92:EA:F5:9C:20:54
Certificate issuer:       /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial:       40B82ABB6728433C41CCAC505A27CD43290783B6
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3133342e302f32332d3234203d3e20323635333033.roa
Signing time:             Mon 08 Apr 2024 14:02:24 +0000
ROA not before:           Mon 08 Apr 2024 13:57:24 +0000
ROA not after:            Mon 07 Apr 2025 14:02:24 +0000
asID:                     265303
IP address blocks:        201.87.134.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Apr 2024 22:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:b8:2a:bb:67:28:43:3c:41:cc:ac:50:5a:27:cd:43:29:07:83:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
        Validity
            Not Before: Apr  8 13:57:24 2024 GMT
            Not After : Apr  7 14:02:24 2025 GMT
        Subject: CN=A446F9FFF9F3258F7FF117810F9692EAF59C2054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e1:54:7d:71:5a:73:34:62:b1:99:3d:08:2a:
                    4c:cf:50:f8:a3:04:55:76:95:30:af:4b:94:6c:71:
                    0b:78:b2:a6:2c:06:d8:3c:b8:5a:d5:c2:e1:bc:75:
                    c9:98:aa:67:d4:00:9e:9a:08:43:a2:17:16:46:60:
                    72:60:31:72:db:f1:bd:d6:84:05:58:8e:10:fd:96:
                    bd:bc:c0:d5:87:fc:06:0d:f2:e1:3e:ca:86:db:9e:
                    bd:c8:42:57:0d:c0:72:21:cf:cf:cc:72:7c:ee:7e:
                    69:95:58:38:ac:c1:19:74:93:50:ad:c0:93:63:50:
                    50:8b:b4:e3:a5:cc:9c:85:3e:c8:23:06:62:9e:af:
                    6b:31:8f:41:6b:ef:67:61:d1:36:58:9f:47:f5:0b:
                    2c:41:ae:be:f1:04:5d:08:5e:db:04:09:8c:f3:f8:
                    54:f1:11:22:e4:ab:ea:ca:43:16:81:3d:1f:be:59:
                    a8:05:1a:3a:41:96:fd:bf:14:7c:dd:dd:bd:a6:f4:
                    7c:82:ee:2d:7b:a1:f0:d6:2b:da:7e:f2:60:4d:5c:
                    c1:d2:ce:bc:da:e2:f7:cf:e9:e4:07:55:28:bb:16:
                    ca:24:1c:7b:40:84:43:5e:d6:02:7b:8a:48:f5:43:
                    7d:19:1a:77:84:e1:c7:3e:63:52:27:6d:19:5e:a5:
                    3c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:46:F9:FF:F9:F3:25:8F:7F:F1:17:81:0F:96:92:EA:F5:9C:20:54
            X509v3 Authority Key Identifier:
                keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/3230312e38372e3133342e302f32332d3234203d3e20323635333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:10:a2:ea:27:b6:dc:8c:0a:8d:cd:43:c9:a1:30:22:b4:32:
         43:37:89:83:08:af:b8:3d:8a:9f:e3:b8:0c:2e:a4:e3:22:08:
         fd:bf:85:8e:94:d4:4f:35:ee:ad:cc:43:77:63:75:22:e2:44:
         8f:b3:11:c2:22:cc:48:b3:b0:21:b4:74:06:f6:f1:eb:06:c0:
         b3:9d:93:33:bb:c0:6a:dd:5b:d5:bd:31:36:b1:35:b0:5f:cb:
         36:d3:22:77:80:c8:e2:14:35:7e:08:62:89:a5:b6:4d:75:dc:
         d4:86:77:54:34:f9:a0:9e:0a:63:78:af:a3:f1:6c:9b:ac:54:
         ec:cd:5e:b1:37:49:5d:66:dc:64:ce:08:80:fd:ca:e0:ba:10:
         88:88:5c:1f:0e:15:ea:40:32:d5:cf:ae:5c:48:51:d3:ae:a1:
         66:65:3e:42:79:45:39:31:48:c0:0d:72:d0:01:36:5f:d7:45:
         f9:6f:bb:73:f0:70:47:77:83:92:12:01:c7:22:1e:73:84:e3:
         46:34:0e:a8:28:16:f7:46:48:20:c5:22:d8:a9:e0:71:37:00:
         e4:5e:0a:bd:44:2d:b9:69:03:33:ff:3c:8a:09:9b:33:7b:44:
         b0:be:f4:fd:10:d9:72:dc:69:2b:34:e1:cb:2d:91:00:09:fc:
         40:93:8d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 23:29:25 2024 by rpki-client on console-ams.rpki-client.org